Summary:
Creating separate user accounts with limited permissions is a smart way to delegate tasks without giving full access. Mikrotik allows you to define user roles for better security and control.

Default Access Behavior

• By default, only the admin account exists, with full permissions.
• It’s best to avoid sharing the admin login and instead create unique users with defined roles.

Step-by-Step: Create a New User via WinBox

1. Open WinBox and log in using admin credentials.
2. Go to System > Users
3. Click the “+” button to add a new user
4. Fill out the following:
   • Name: Desired username (e.g., techsupport)
   • Group: Choose read, write, or full
   • Password: Enter a secure password for the user
5. Click Apply and then OK

Group Roles:

• read – Can view settings but not make changes
• write – Can make most changes but can’t alter system-wide settings
• full – Same as admin privileges

IMPORTANT: Avoid giving unnecessary full access to staff or clients.

To Create a New User via CLI (Terminal)

1. Open Terminal in WinBox or connect via SSH
2. Enter the following command:

   /user add name=techsupport group=read password=SecurePass123

Replace techsupport with your desired username, and SecurePass123 with a strong password.

To List All Users via CLI

To Remove a User via CLI

Best Practices:

• Create a separate user for each technician or team member
• Assign the read group to those who only need monitoring access
• Regularly review and remove unused accounts under System > Users
• Always use strong passwords for all users